The aim of this policy is to inform data subjects about the different processing activities carried out by this organisation through its website involving their personal data, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and Digital Rights.
1. CONTROLLER IDENTIFICATION AND CONTACT DATA
ANAR FOUNDATION, based at AVENIDA AMERICA 24, 1ª PLANTA (28028 MADRID) MADRID, Spanish Tax ID (CIF) G80453731, contact phone +34 917262700, contact email [email]. DATA PROTECTION OFFICER: SEGURIDAD Y PRIVACIDAD DE DATOS, SL, phone +34 963 122 868, email [email].
2. PROCESSING PURPOSES
We process the personal data provided by users, candidates, whistleblowers, members, volunteers and donors to deliver services, answer requests, comply with legal obligations and protect our rights. For full details please refer to the full Spanish version.
3. LEGAL BASIS
Consent, performance of a contract, legal obligation, and legitimate interest, depending on the data subject category.
4. PLUGINS AND TOOLS
- Google Analytics 4 — no IP storage, event-based model.
- Chat bot — requires prior consent.
- Redsys — secure payment gateway.
5. RETENTION PERIODS
Data will be kept as long as necessary to fulfil the purposes and, afterwards, blocked during the legal limitation periods (Civil Code 1-5 years, Commercial Code 6 years, General Tax Law 4 years, Law 10/2010 on money laundering prevention 10 years).
6. AUTOMATED DECISIONS
The website does not make automated decisions or profiling.
7. RECIPIENTS
- Judges and Courts.
- State Security Forces and Bodies.
- Competent public authorities or bodies.
- Data processors providing services to us.
- Banks and financial institutions.
- SEPBLAC (Spanish Anti-Money Laundering Unit).
8. INTERNATIONAL TRANSFERS
The organisation does not carry out international data transfers.
9. SOCIAL MEDIA
ANAR FOUNDATION has a presence on Facebook, Twitter, LinkedIn, YouTube, Instagram and TikTok. Please check each platform's own privacy policy.
10. RIGHTS
You can exercise, free of charge, your rights of access, rectification, erasure, restriction, objection, portability and withdrawal of consent by contacting the channels listed above. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
11. ACCURACY OF DATA
The data subject guarantees that the data provided are true, accurate, complete and up to date.
12. CHANGES AND UPDATES
This policy may be modified. We recommend reviewing it periodically.